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The present invention relates generally to a bio-surveillance system that 
monitors the symptoms of people in need of medical assistance and generates an 
alert when the monitored symptoms exceed a trigger. 

Emergency services dispatchers use a dispatcher computer system that 
prompts them through a series of questions to ask a caller about the details of the 
emergency, such as the symptoms of a person needing medical assistance. Based 
upon the responses to the questions, the dispatcher computer system makes a 
preliminary assessment or diagnosis which is communicated to the emergency 
response personnel. 

Recently, there have been fears of biological or chemical terrorist attacks. In 
response to these fears, the assignee of the present invention has developed a bio- 
surveillance system that monitors the number of occurrences of certain assessments 
or diagnosis from the dispatcher computer system. The bio-surveillance system 
compares a trailing 12-hour total of selected assessments to a trigger threshold, 
which varies based upon the time of the day and the day of the week. The trigger is 
set to some statistical variation of the historical data, such as the historical average 
plus two standard deviations. When the number of assessments exceeds the trigger, 
an alert is activated that indicates that there may possibly be a biological or chemical 
attack. The system assists emergency personnel and governmental authorities in 
identifying and responding to a potential threat as early as possible. 

There are several drawbacks to the existing system. For one, the bio- 
surveillance system relies upon the preliminary assessment or diagnosis of the 
dispatchers. By following the pre-programmed series of questions, the dispatchers 
have a strong tendency to make assessments that are statistically more likely, and 
they are unlikely to make conclusions of statistically unlikely problems. 

For example, although there is a current concern regarding biological attacks, 
a dispatcher is unable, or unlikely, to conclude based upon the responses to the 
questions that the person in need of assistance has Anthrax, small pox or is suffering 
from a chemical attack or other extremely rare problem. The dispatcher computer 
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system is programmed to quickly assess statistically high likelihood problems and is 
not programmed to assess rare diseases from terrorist attacks. 

The existing bio-surveillance system is also limited in its use of the triggers 
and its ability to change triggers. In the existing system, the system must be taken 
5 off-line to change a trigger, and the trigger must be rebuilt statistically based upon 
the historical data. For example, if the administrator of the system wants to increase 
the sensitivity of the system in response to current threats, such as by reducing the 
trigger from the historical average plus three standard deviations to the historical 
average plus two standard deviations, the system is taken off-line, and the trigger is 

10 rebuilt by reprocessing all of the historical data. Therefore, it is difficult to 
temporarily change the trigger quickly. 

Further, in the existing system, calls and their associated assessments are 
indexed according to the address information, which can then be displayed in a 
listing of all the calls along with the problems to try to determine geographic 

15 relationships. However, it is difficult to determine geographic relationships simply 
based upon addresses and because different dispatchers may make different 
assessments. 

SUMMARY OF THE INVENTION 

20 The bio-surveillance system of the present invention alerts authorities of a 

potential biological or chemical terrorist attack or other event by monitoring 
symptoms reported to emergency services dispatchers. When person is in need of 
medical assistance, a caller contacts an emergency service dispatcher. The 
emergency services dispatcher inputs the symptoms into a dispatcher computer 

25 system, and the symptom information is provided to a local central computer. 

Various triggers are programmed and stored in the bio-surveillance system. 
Each trigger is set based on a statistical variation of the historical data of a symptom 
or a group of symptoms at various times of the day and days of the week. The local 
central computer monitors the symptoms or the groups of symptoms to look for 

30 certain types of threats. When the reported symptoms or groups of symptoms 
exceed one of the triggers, an alert is activated, indicating the possibility of a 
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terrorist attack or other rare event. Various symptoms in a trigger can also be 
weighted. 

The triggers of the bio-surveillance system can be changed "on the fly." 
Therefore, an administrator can quickly define and change a trigger to represent 
5 certain criteria without having to wait for a recalculation of the entire trigger. The 
reports symptoms can then be compared to the redefined trigger to detect a threat. 

The data from the local central computer in a geographic region can be sent 
via a secure Internet connection to a main central computer which performs the 
analysis described above on a larger regional, state or national scale. The main 
10 central computer can have different triggers form the triggers used with the local 
central computer. 

These and other features of the present invention will be best understood 
from the following specification and drawings. 

15 BRIEF DESCRIPTION OF THE DRAWINGS 

The various features and advantages of the invention will become apparent to 
those skilled in the ait from the following detailed description of the currently 
preferred embodiment. The drawing that accompany the detailed description can be 
briefly described as follows: 
20 Figure 1 schematically illustrates the bio-surveillance system of the present 

invention; 

Figure 2 illustrates a screen capture of the software operating the bio- 
surveillance system of the present invention showing various selection buttons; 

Figure 3 illustrates a screen capture showing the selection of trigger criteria 
25 for a given trigger; 

Figure 4 illustrates a screen capture showing the volume settings of a given 

trigger; 

Figure 5 illustrates a screen capture showing the spatialspatial settings of a 
given trigger; 

30 Figure 6 illustrates a screen capture showing the selection of the manner of 

generating an alert; 
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Figure 7 illustrates a graph illustrating a triggering event, a current event, and 
a historical event of a trigger on a given day; 

Figure 8 illustrates a map showing the geographical locations of various 
symptoms; 

5 Figure 9 illustrates a report of reported symptoms, addresses and time of 

calls reported to a dispatcher center; and 

Figure 10 schematically illustrates numerous local bio-surveillance systems 
which communicate with a main central computer. 

10 DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 

Figure 1 schematically illustrates the bio-surveillance system 10 of the 
present invention. The bio-surveillance system 10 alerts authorities of a potential 
occurrence of an unusual or rare nature, such as a biological or chemical terrorist 
attack or other event. By statistically examining the symptoms described in calls 

15 compared to historical data and the geographic locations of the incidents, the bio- 
surveillance system 10 can quickly alert authorities that a biological or chemical 
terrorist attack or other rare event has possibly occurred. The bio-surveillance 
system 10 monitors the symptoms from all of the calls in a geographical area to 
provide a detection as early as possible. 

20 When person is in need of medical assistance, a caller contacts an emergency 

services dispatcher at a dispatcher center 14. Usually, the caller contacts the 
emergency service dispatcher by telephone 12, for example by calling 9-1-1. A 
dispatcher computer system 16 prompts the emergency services dispatcher to ask the 
caller about the symptoms the person in need of medical assistance is experiencing 

25 through a series of questions. The emergency services dispatcher inputs the 
responses to the questions and the symptoms into the dispatcher computer system 
16. The dispatcher computer system 16 then provides this information to a local 
central computer 18a. Other local dispatch centers 14b and 14c also communicate 
with the local central computer 18a. The local dispatch centers 14a, 14b and 14c 

30 preferably communicate information to the local central computer 18a after each 
call. 
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Based upon a single call or even a few calls, an emergency services 
dispatcher is unlikely or unable to determine that a chemical or biological attack or 
other rare event has occurred. The bio-surveillance system 10 monitors the 
underlying responses to the questions, including the symptoms experienced by the 
5 person in need of medical assistance. For example, the symptoms can include 
headache, fever, fainting, clammy, unconscious, bleeding, vomiting, nausea, etc, or 
any other type of symptoms. 

The dispatcher computer system 16 identifies the address of the caller and 
associates the address and the time of the call with the symptoms the person is 

10 experiencing. The dispatcher computer system 16 relays the address to the local 
central computer 18a. The address of the caller is geo-coded to a specific latitude 
and a longitude, and the local central computer 18a tracks the symptoms reported by 
the various calls placed to the local dispatch centers 14a, 14b and 14c. 

Various triggers are programmed and stored in the bio-surveillance system 

15 10 to look for certain types of threats. Each trigger is based on a statistical variation 
of historical data of the occurrence of the symptoms or various symptoms in a 
geographical area. Each trigger can vary based on the time of day and the day of the 
week. The triggers can be customized by an administrator to look for specific 
threats in a given geographical area. 

20 When the symptoms reported by the local dispatch centers 14a, 14b and 14c 

exceed one of the triggers, an alert is activated. The alert can be transmitted by 
pager, email, an on-screen message, fax, a printed report, or any other method of 
altering a user. The alert can also provide information of whether the alert is a 
serious event or if it simply an increase in non-related calls. • 

25 Figure 2 illustrates a screen capture of the main screen of the software that 

operates the bio-surveillance system 10 of the present invention. Through this 
screen, the administrator at the local central computer 18a can set or change the 
triggers, view the selection of triggers, view a map of the geographical location of 
the symptoms, or view a report of the reported symptoms. 

30 For example, if the administrator selects the "settings" button 22, the 

administrator can modify the triggers. By selecting the "view reports" button 24, the 
administrator can view various reports related to the reported symptoms, such as a 
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listing of all symptoms and locations (Figure 10). By selecting the "view chart" 
button 26, the administrator can view a chart comparing the reported symptoms, the 
historical data, and the trigger (Figure 8). By selecting the "view map" button 28, 
the administrator can view a map of the geographical location showing where the 
5 symptoms have been reported (Figure 9). For example, as shown in Figure 9, the 
monitored symptoms appear as triangles. By viewing a map of the symptoms, an 
administrator can visually see where the symptoms have been reported. 

When the administrator wants to change a given trigger, the administrator 
selects the "settings" button 22, which opens the screen shown in Figure 3. If the 

10 administrator wants to change the symptoms selected for a given trigger, the 
administrator selects the "problem/nature criteria" tab 30 as shown in Figure 3, 
which illustrates an example of a screen capture showing the selection of the 
symptoms for a given trigger. The name of the trigger that is being modified is 
inputted into a name field 32. All possible symptoms are listed in a "problem/nature 

15 criteria" list 34, which includes a list of all potential symptoms. 

When setting a trigger, the administrator can add and remove symptoms by 
using this screen. For example, when the administrator wants to add a symptom to a 
trigger, the administrator highlights the symptom in the "problem/nature criteria" list 
34 and clicks on the "add to list" button 36. When selected, the symptom appears in 

20 a "problem/nature trigger criteria" list 38 which includes a list of all selected 
symptoms, indicating that the selected symptom is now added to the trigger. A 
symptom can be removed by selecting and highlighting the symptom in the 
"problem/nature trigger criteria" list38 and clicking the "remove from list" button 40 
to remove the symptom from the "problem/nature trigger criteria" list 38. 

25 When the administrator wants to modify the sensitivity of the trigger, the 

administrator selects the "volume settings" tab 42. The resulting screen is illustrated 
in Figure 4. After selecting the "volume settings" tab 42, the administrator can input 
into the standard deviation field 44 the number of standard deviations of the trigger 
from the historical average. For example, in response to a threat, the administrator 

30 can make a given trigger more sensitive by reducing the trigger from the historical 
average plus three standard deviations to the historical average plus two standard 
deviations. The window of analysis, or the amount of time in the past that is 
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analyzed, is inputted into field 46. The number inputted into field 46 determines 
how far back data is considered to calculate the trigger. In the example shown in 
Figure 4, 12-hour trailing data would be the basis of comparison. When the changes 
. are made, the administrator selects the "recalculate" button 48 to recalculate the 
5 trigger. 

The administrator can also modify a given trigger so that the bio-surveillance 
system 10 generates an alert if a predetermined number of calls relating to the 
symptoms in a given trigger are reported in predetermined area by selecting the 
"spatial settings" tab 50. As shown in Figure 5, spatial alert triggering is activated 

10 by checking the "use spatial alert triggering" box 52. The required number of calls 
is inputted into the "number of calls" field 54, and the radius of the calls is inputted 
into the "miles radius" field 56. For example, as shown in Figure 5, if there are 
more than 10 calls relating to the symptoms in the selected trigger in a 5 mile radius 
within 12 hours (from Figure 4), an alert is generated. 

15 The administrator can select the method of delivering an alert by selecting 

the "alerts" tab 58. As shown in Figure 6, the alert can be generated by a printer by 
selecting the "print reports on trigger" box 60. The alert can be sent to a pager by 
selecting the "send page alert on trigger" box 62. The alert can be emailed by 
selecting the "send alert emails with report attachments on trigger" box 64 or faxed 

20 by selecting the "send alert faxes with report attachments on trigger" box 66. If the 
alert is emailed or faxed, the chart showing the reported symptoms and the trigger 
(Figure 8), the map of reports (Figure 9), and the report of the symptoms (Figure 10) 
are also sent with the alert. The administrator selects the "email and fax alert 
configuration" button 68 to program the email addresses and fax numbers that 

25 receive the alert. The administrator can test the bio-surveillance system 10 by 
selecting the "test alerts" button 70 to determine if the system 10 is working 
properly. The administrator can also program a message to be sent with the alerts in 
the "report message" field 72. When the administrator is finished modifying the 
alert from this screen or modifying any of the triggers employing the above- 

30 described screens, the administrator selects the "close & go to the main menu" 
button 74. 
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Figure 7 illustrates a graph which displays the monitored symptoms of a 
given trigger. Line 1 Illustrates a line representing the 12-hour trailing average for 
the symptoms in the trigger during a given day based on historical data. Line 2 
illustrates a line representing the trigger. Line 3 illustrates a line representing the 
5 actual calls received relating to the symptoms. As shown, at hour 5, the number of 
calls relating to the symptoms in the trigger exceeds the trigger threshold. 
Therefore, an alert is generated at hour 5 indicating the possibility of a threat. As 
described above, the graph can be viewed by selecting the "view map" button 28 of 
Figure 2. The map can also be faxed or emailed to a desired person when an alert is 
10 generated. 

As shown in Figure 8, the bio-surveillance system 10 also displays 
occurrences of the symptoms or groups of symptoms on a map for easier evaluation 
by a human. For example, the location of the selected symptoms or groups of 
symptoms can be displayed as dots on a street map in a selected geographic area. If 

15 the alert is triggered, a user can look at a map for clustering and can begin 
researching the triggering event. In the screen capture illustrated, the reported 
symptoms are illustrated as triangles. As described above, the map can be viewed 
by selecting the "view map" button 28 in Figure 2. The map can also be faxed or 
emailed to a desired person when an alert is generated. 

20 Figure 9 illustrates a report summarizing all of the reported symptoms, the 

addresses of the calls, and the date and time of the calls inputted into the bio- 
surveillance system 10. As described above, the report can be viewed by selecting 
the "view reports" button 24 in Figure 2. The report can also be faxed or emailed to 
a desired person when an alert is generated. 

25 The symptoms inputted into the dispatcher computer system 16 can also be 

, monitored remotely. As shown in Figure 10, the data from the local central 
computer 18a in a geographic area, such as a city, county or state, is sent via a 
secure encrypted Internet connection to a main central computer 20 which performs 
the analysis described above on a regional scale. Other local central computers 18b 

30 and 18c from other geographic area also communicate with the main central 
computer 20. 
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The main central computer 20 aggregates the data from the multiple local 
central computers 18a, 18b and 18c for analysis on a local, or and national scale. 
Even though the main central computer 20 aggregates the data and includes its own 
triggers, the local central computers 18a, 18b and 18c can each still include their 
5 own sets of triggers as described above. However, the main central computer 20 can 
have different triggers to monitor different types of threats (e.g. more slowly 
developing threats) because they are monitoring more data from a larger geographic 
area. Again, these triggers can be changed on the fly based upon the current threat 
level. 

10 The main central computer 20 can monitor the website of the Office of 

Homeland Security. If the current threat level changes, the main central computer 
20 can adjust the triggers automatically to be more sensitive. For example, if the 
threat level changes from yellow to orange, the threat level increases. The main 
central computer 20 can then adjust the triggers in response to this increase to be 

15 more sensitive. For example, the trigger can be adjusted from the historical average 
plus three standard deviations to the historical average plus two standard deviations. 

In the bio-surveillance system 10 of the present invention, the triggers are 
calculated "on the fly." The administrator can define and change a trigger to include 
certain criteria. For example, the administrator can add a symptom or change the 

20 statistical relationship to the historical data based upon the perceived threat and/or 
vulnerability. 

If a threat is received, the administrator can easily increase the sensitivity of 
the bio-surveillance system 10 by changing the trigger criteria (Figures 4 and 5) 
without taking the system off-line and waiting for the system 10 to rebuild all of the 

25 triggers. For example, the sensitivity of the bio-surveillance system 10 can be 
increased by decreasing the standard deviation field 44 in Figure 4 from three 
standard deviations to two standard deviations, so that the trigger changes from the 
historical average plus three standard deviations to the historical average plus two 
standard deviations, making the bio-surveillance system 10 more sensitive. The 

30 method for implementing the change is described below. 

Referring to Figure 7, the trigger has a historical window, a repeat frequency 
and period, and an update frequency and period. For example, if the historical 
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window is one year, then the trigger is calculated only based upon data from the 
preceding year. If the trigger's update frequency is five minutes, then the trigger is 
updated every five minutes. During an update, the immediately preceding update 
period (e.g. the immediately preceding five minutes) is added to the historical data 
5 while the update period now preceding the historical window (e.g. the five minutes 
immediately preceding the immediately preceding year) is dropped from the 
historical data and the trigger is updated based upon the specified statistical criteria. 
The trigger potentially has distinct values for every update period during its repeat 
period. For example, the trigger's repeat period may be one week, so that at a given 

10 moment, the trigger would have distinct values for each five minute period Sunday 
through Saturday. Because the update involves only adding five minutes worth of 
data to the historical data and subtracting five minutes worth of data from the 
historical data, without recalculating all the data in between, the update can be 
calculated very quickly. 

15 In the present invention, the criteria for each trigger (Figures 4 and 5) can 

also be changed "on the fly," i.e. without taking the system off-line. If a trigger is 
changed because of a threat (either a "volume" trigger (Figure 4), or a "spatial" 
trigger (Figure 5)), the trigger must be recalculated. During the time that the new 
trigger is being recalculated (the "recalculation time"), the bio-surveillance system 

20 10 continues to compare the reported number of the given symptoms to the old 
trigger. Once the new trigger is calculated after the recalculation time, the new 
trigger is compared to the reported symptoms. If (as expected) the recalculation 
time is longer than the normal update period, the next update to the trigger must add 
the actual data accumulated during the recalculation time to the historical data 

25 (while subtracting out a corresponding period from before the historical window). 
This first update may even take longer than the normal update period, so again the 
second update would need to include the actual data accumulated during the first 
update period. This could continue iteratively, with each calculation time being less 
than the previous until reaching the normal update period. 

30 Alternatively, if the processing power is sufficient relative to the size of the 

historical data, each trigger could be completely calculated before each comparison 
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of the inputted data to the trigger. Therefore, altering the criteria is no different from 
updating the trigger. 

The frequency of the comparison of the trigger and the inputted data is also 
variable and can be programmed by the administrator. For example, the inputted 
5 data and the trigger can be compared every 5 minutes. Continuing with the above- 
example, although the trigger is calculated every hour, the local dispatch centers 
14a, 14b and 14c send the symptom information to the local central computer 18a 
after every call or even during each call as the symptoms are entered into the 
dispatcher computer system 16 for comparison with the trigger. 
10 Although a preferred embodiment is described above, many variations are 

possible, especially in the statistical analysis of the data. Some examples are 
described below. 

Each symptom in a given trigger can also be provided with a weighting 
factor. For each symptom having a weighting factor in a given trigger, the number 

15 of occurrences of each symptom is multiplied by its weighting factor. The total 
number of weighted occurrences of all of the symptoms is then compared to the 
trigger. Each trigger can also require that a specific number of reports of each of the 
symptoms be required. An alert is activated when the total number of weighted 
occurrences of the symptoms in the trigger meets or exceeds the trigger. 

20 For example, trigger A can be set at 500 based on the symptoms headache 

and nausea. When a combined total of 500 reports of weighted headache and 
weighted nausea are inputted by the emergency services dispatcher in a given 
geographical area at a given time, an alert is activated. For example, headache has a 
weighting factor of 3, and nausea has a weighting factor of 2. If 150 reports of 

25 headache (150 reports multiplied by the weighting factor of 3) and 75 reports of 
nausea (75 reports multiplied by the weighting factor of 2) are reported, the 
weighted total would be 600 and an alert would be triggered as the weighted total 
exceeds 500. 

Alternatively, trigger A can be set to also require a specific number of 
30 reports of each of the symptoms. For example, the trigger A can also require in 
addition to the combined weighted total of 500 reports that 100 reports of headache 
and 100 reports of nausea be reported. In the described example, only 75 reports of 
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nausea are reported. Therefore, although the weighted total of 500 was exceeded, 
the individual requirement of 100 reports of nausea was not reached. Therefore, an 
alert would not be generated. Although these examples have been described, it is to 
be understood that the parameters for the triggers can vary. v 
5 Different symptoms in a specific trigger can have different weighting factors. 

A symptom can also belong to multiple triggers and can have a different weighting 
factor in each trigger. For example, in trigger A, headache can have a weighting 
factor of 2 and nausea can have a weighting factor of 3. In trigger B, headache can 
have a weighting factor of 3 and nausea can have a weighting factor of 2. 

10 Each trigger can also have its own treatment of the geographic relationship 

of the symptoms. For example, the trigger can be weighted and include a value 
which depends on the proximity or clustering of the symptoms. In general, the 
greater the concentration of the monitored symptoms in a trigger, the more likely the 
trigger is to be triggered to generate an alert. Alternately, data indicating no 
' 15 grouping or clustering of symptoms will tend to decrease the level of concern. 
Different statistical or numerical methods can be used to assign a value to the 
clustering or grouping of the symptoms. 

Alternatively, the geographical information is not part of the trigger, but is 
considered prior to generating an alert. If a trigger is exceeded, the local central 

20 computer 18a checks the geographic locations of the symptoms prior to generating 
an alert. If the central computer 18a determines that the calls are clustered, an alert 
would be activated. However, if the central computer 18a determines that there is 
no pattern to the calls, the alert would not be activated. 

The triggers can also monitor the rates of change of certain symptoms or 

25 groups of symptoms. Depending upon the particular threat monitored by a given 
trigger, the rate of change of certain symptoms can be important in analyzing the 
potential occurrence of a threat. Some potential attacks may occur more quickly or 
more slowly than others. A trigger can be set/o consider the rate of change of the 
symptoms in a given time period. For example, a trigger can be set to monitor the 

30 rates of change of certain symptoms or groups of symptoms in a 12-hour trailing 
period or a 24-hour trailing period. As described above, the trailing period is set by 
inputting the desired amount of time into the box 46 of Figure 4. 
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Filters can also be employed to include or exclude calls based on criteria set 
in the database. For example, if the temperature in the geographical area increases, a 
filter can be employed to reduce the weighting of heat related symptoms. 

Counter values can also be used in the calculations of the triggers. For 
5 example, information about the number of patients transported, the units cancelled 
prior to arriving on the scene, and the calls waiting in the queue can be detected and 
used to adjust the trigger. Information from other sources can also be utilized. For 
example, symptoms experienced by animals reported by veterinarians or animal 
control centers and symptoms experienced by people in an emergency room can also 
10 be inputted into the bio-surveillance system 10. 

Although the present invention has been described for use in monitoring 
potential terrorist threats, this invention is also useful for monitoring other hazards, 
threats or situations. For example, the present invention is useful for monitoring 
heat-related emergency dispatch calls, occurrences of food poisoning, rises in levels 
15 of gang violence and any other situation that may cause a rise in the number of calls 
for emergency assistance. 

The foregoing description is only exemplary of the principles of the 
invention. Many modifications and variations of the present invention are possible 
in light of the above teachings. The preferred embodiments of this invention have 
20 been disclosed, however, so that one of ordinary skill in the art would recognize that 
certain modifications would come within the scope of this invention. It is, therefore, 
to be understood that within the scope of the appended claims, the invention may be 
practiced otherwise than as specifically described. For that reason the following 
claims should be studied to determine the true scope and content of this invention. 

25 
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